Method for Allowing Consumer Control Over Personal Healthcare Information

Abstract

A method of gathering, storing, distributing and retrieving personal consumer medical information employs creating a consumer healthcare information account with the medical information stored in a database on a web server, issuing to the consumer a token having a unique identifying number that is linked to the consumer's account. The consumer may access the account information through use of a unique login name and password, but authorized third parties access or add to portions of the account information by using the token, with its unique identifying number. The consumer controls all aspects of data gathering and release. The token may also be used in a co-marketing program that provides the consumer with benefits for regular or frequent use.

1 . A method for allowing consumer control with regard to gathering, distribution and use of personal healthcare information comprising the steps of:
 establishing a personal healthcare information account for the consumer on a data store that is connected to a web server;   providing the consumer with a commonly carried tangible token that has a unique token identification number that is linked to the personal healthcare information account, the token further including a visually identifiable graphic pattern or logo, the token having a primary use generally unrelated to the personal healthcare information account;   allocating a unique login name and password for the consumer to use to communicate with the web server regarding the personal healthcare information account;   allowing the consumer to access the data store and thereby to view, to enter, to modify, and to print personal healthcare information in the data store;   enabling uploading of information to the personal healthcare information account via a facsimile that includes a cover sheet having account-identifying criteria and additional document tagging information;   enabling predetermined third parties to upload information into the personal healthcare information account by sending such data together with the token identification number to the web server, upon receipt of which the web server automatically enters the uploaded data into the personal healthcare information account without requiring the login name or password;   allowing the consumer to electronically deliver predetermined portions of the personal healthcare information to third parties;   making available to third parties portions of the personal healthcare information upon occurrence of a triggering event by a process comprising the steps of:
 determining the type of triggering event and classifying the type as one of a medical emergency, a non-emergency physician or hospital visit, or a consumer-initiated event; 
 if the triggering event is a medical emergency, allowing view only access to a first consumer-defined portion of the personal healthcare information by an emergency provider based on possession of both the tangible token and a level of authentication that indicates the responder is associated with a registered emergency healthcare provider, and without the need for the provider to know the login name or password; 
 if the triggering event is a non-emergency, allowing view only access to a second consumer-defined portion of the personal healthcare information by a third party based on possession of both the tangible token and a level of authentication that indicates the third party is a known registered entity, and without the need for the third party to know the login name or password; 
 if the triggering event is a consumer-initiated event, allowing access to a third consumer-defined portion of the personal healthcare information by requiring the consumer to:
 log in to the data store using the login name and password; 
 select the personal healthcare information to be contained in the third portion; and 
 send an invitation to a third party to provide view only access to the third portion for a limited time period; and 
 
 creating and maintaining a transaction log that identifies all accesses and attempted accesses to the personal healthcare information stored in the account. 
   
     
     
         2 . The method of  claim 1  wherein the token is a card. 
     
     
         3 . The process of  claim 1  wherein the token is an electronic device. 
     
     
         4 . The method of  claim 1  wherein the token includes co-branding with an issuer of the token. 
     
     
         5 . The method of  claim 1  wherein the personal healthcare information includes digital radiology images entered into the data store by a third party. 
     
     
         6 . The method of  claim 1  wherein the personal healthcare information includes prescription drug information entered into the data store by a third party. 
     
     
         7 . The method of  claim 1  wherein points earned by using the token are convertible into a medical payment account to be used to assist the consumer in paying for prescribed drugs or other healthcare services. 
     
     
         8 . A method for managing personal information comprising the steps of:
 establishing an information account for a consumer on a web server;   allowing the consumer to communicate data to and from the information account on the web server using a unique login name and password;   providing the consumer with a token that has a unique token identification number linked to the information account;   enabling predetermined third parties to transmit data to the information account together with the token identification number, upon receipt of which the web server enters the data into the information account without requiring the login name or password;   making available to third parties portions of the personal information upon occurrence of a triggering event by a process comprising the steps of:   
       if the triggering event is an emergency, allowing view only access to a first predetermined portion of the personal information by an emergency provider based on possession of both the tangible token and a level of authentication that indicates the provider is associated with a registered emergency provider, and without the need for the provider to know the login name or password;
 if the triggering event is a non-emergency, allowing view only access to a second predetermined portion of the personal information by a third party based on possession of both the tangible token and a level of authentication that indicates the third party is a known registered entity, and without the need for the third party to know the login name or password; 
 if the triggering event is a consumer-initiated event, allowing access to a third predetermined portion of the personal information by requiring the consumer:
 to log in to the web server using the login name and password; 
 to select the personal information to be contained in the third predetermined portion; and 
 to provide view only access to the third predetermined portion to a third party for a limited time period. 
 
 
     
     
         9 . The method of  claim 8  wherein the token includes a visually identifiable graphic. 
     
     
         10 . The method of  claim 8  wherein the token has a primary use generally unrelated to the information account. 
     
     
         11 . The method of  claim 8  wherein the consumer communicates with the personal information account via a facsimile that includes a cover sheet having account-identifying criteria. 
     
     
         12 . The method of  claim 8  wherein the token is a card. 
     
     
         13 . The process of  claim 8  wherein the token is an electronic device. 
     
     
         14 . The method of  claim 8  wherein the token includes co-branding with an issuer of the token. 
     
     
         15 . The method of  claim 8  further comprising the step of creating and maintaining a transaction log that identifies all accesses and attempted accesses to the personal healthcare information stored in the account. 
     
     
         16 . The method of  claim 8  wherein the personal information includes medical images provided to the information account by a third party. 
     
     
         17 . The method of  claim 8  wherein points earned by using the token are convertible into a benefit account for the consumer. 
     
     
         18 . A method for managing personal information comprising the steps of:
 establishing on a web server an information account over which a consumer controls entry of, deletion of, modification of, and distribution of any data loaded therein;   providing the consumer with a token having a primary use generally unrelated to the existence of the information account; and   linking a unique token identification number to the information account.   
     
     
         19 . The method of  claim 18  further comprising the step of making a predetermined portion of the data in the information account available to a predetermined type of third party based upon proper authentication by the third party and upon at least one of:
 possession by the third party of the token; 
 knowledge by the third party of the token identification number; or 
 an invitation from the consumer to the third party. 
 
     
     
         20 . The method of  claim 18  further comprising the step of making available predetermined portions of the data upon occurrence of a triggering event by a process comprising the steps of:
 if the triggering event is an emergency, allowing view only access to a first predetermined portion of the data by an emergency provider based on possession of both the tangible token and a level of authentication that indicates the provider is associated with a registered emergency provider, and without the need for the provider to know the login name or password; 
 if the triggering event is a non-emergency, allowing view only access to a second predetermined portion of the data by a third party based on possession of both the tangible token and a level of authentication that indicates the third party is a known registered entity, and without the need for the third party to know the login name or password; 
 if the triggering event is a consumer-initiated event, allowing access to a third predetermined portion of the data by requiring the consumer:
 to log in to the web server using the login name and password; 
 to select the data to be contained in the third predetermined portion; and 
 to provide view only access to the third predetermined portion to a third party for a limited time period. 
 
 
     
     
         21 . The method of  claim 18  further comprising the step of creating and maintaining a transaction log that identifies all accesses and attempted accesses to the personal information stored in the account. 
     
     
         22 . The method of  claim 18  further comprising the step of enabling third parties to transmit data to the information account based on the token identification number, upon receipt of which the web server enters the data into the information account. 
     
     
         23 . The method of  claim 18  wherein points earned by using the token are convertible into a benefit account for the consumer.